CiscoCertified Support Technician (CCST) Cybersecurity
Domain 3Objective 2
Demonstrate Familiarity with Appropriate Endpoint Tools That Gather Security Assessment Information 100-160 Practice Questions (Page 5)
Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)
31questions here
7free pages
3concepts
Questions 21–25
- 21
A Windows administrator is checking for unauthorized listening services on a server. The administrator needs to list all listening TCP ports and the associated process IDs. Which command should be used?
Select an answer first - 22
A Linux server is suspected of sending outbound data to an unusual IP address. The analyst needs to see the actual payload of the outbound packets to determine if sensitive data is being exfiltrated. Which command should be used?
Select an answer first - 23
A network engineer is troubleshooting a server that is sending a large amount of traffic to a single external IP. The engineer needs to capture the packets to and from that specific IP address for analysis. Which command should be used?
Select an answer first - 24
A Windows administrator notices that a workstation is making repeated connections to a suspicious IP address on port 4444. The administrator needs to confirm whether the connection is currently active and which local port is being used. Which command should be run?
Select an answer first - 25
A Windows administrator is troubleshooting a server that is not responding to network requests. The administrator suspects that the server's network interface is not configured correctly. Which command should be used to verify the IP address, subnet mask, and default gateway?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.